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ALICE DECIDES TO ACCESS 
RESOURCE ON BOB 
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RESOURCE: "112" 



CUENT X 1 IS PERMITTED ACX5ESS 



CLIENT X 2 IS PERMITTED ACCESS 



GROUP G1 IS PERMITTED ACCESS 



GROUP Q2 IS PERMITTED ACCESS 



GROUP G3 IS PERMITTED ACCESS 



ACL OF RESOURCE ON SERVER BOB 



FIG. 5 
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ALICE LOCATES: 
THE SERVER FOR GROUP Q1 
THE SERVER FOR GROUP G2 
THE SERVER FOR GROUP G3 
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ALICE ESTABUSHES A FAMILY TREE FOR EACH ROOT GROUP | 



AUCe SELECTS A GROUP FROM THE LIST 
TO CHECK MEMBERSHIP 
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ALICE TRANSMITS A REQUEST TO THE SERVER OF THE 
SELECTED GROUP FOR A CERTIFICATE OF MEMBERSHIP 
IN THE SELECTED GROUP 



ALICE RECEIVES A REPLY FROM THE SERVER OF 
THE SELECTED GROUP 
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ALICE LOCATES 
SUBGROUP SE RVERS 
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ALICE ADDS SUBGROUPS TO 
THE APPROPRIATE FAMILY TREE 
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